Add policy label for passwd.OLD

diff --git a/policy/modules/system/authlogin.fc b/policy/modules/system/authlogin.fc
index 02a592a65cfe520ade6bb71d2ff4a68e0c4fa8f5..bb64dec9a0731fef153f445a736d43f8c4051f50 100644 (file)
--- a/policy/modules/system/authlogin.fc
+++ b/policy/modules/system/authlogin.fc
@@ -8,6 +8,7 @@
 /etc/passwd\.adjunct.* --      gen_context(system_u:object_r:shadow_t,s0)
 /etc/shadow.*          --      gen_context(system_u:object_r:shadow_t,s0)
 /etc/passwd-?          --      gen_context(system_u:object_r:passwd_file_t,s0)
+/etc/passwd\.OLD               --      gen_context(system_u:object_r:passwd_file_t,s0)
 /etc/ptmptmp           --      gen_context(system_u:object_r:passwd_file_t,s0)
 /etc/group-?           --      gen_context(system_u:object_r:passwd_file_t,s0)
 

diff --git a/policy/modules/system/authlogin.if b/policy/modules/system/authlogin.if
index 6355d14eb66ea3a7f3fcd919c37f8138b171815c..131195da10f0e0af37d7ce994e807067f4016007 100644 (file)
--- a/policy/modules/system/authlogin.if
+++ b/policy/modules/system/authlogin.if
@@ -1830,6 +1830,7 @@ interface(`authlogin_filetrans_named_content',`
        files_etc_filetrans($1, passwd_file_t, file, "group-")
        files_etc_filetrans($1, passwd_file_t, file, "passwd")
        files_etc_filetrans($1, passwd_file_t, file, "passwd-")
+       files_etc_filetrans($1, passwd_file_t, file, "passwd.OLD")
        files_etc_filetrans($1, passwd_file_t, file, "ptmptmp")
        files_etc_filetrans($1, shadow_t, file, "shadow")
        files_etc_filetrans($1, shadow_t, file, "shadow-")